Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File: C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier: KYBKl16WFzeJlGmYYLPvjkwNvZ0LoFP89f4UW+ZoPWs=
Subject key identifier: 2D:FB:1E:FF:DB:F1:E4:F2:1A:77:01:6A:47:38:77:90:05:36:67:E5
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer: /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial: 0194BD8535B57C547BCB38F8D154BEAB7921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number: 1139
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: GY8xqp6qWpkyT9mQU8E2ig7eqQcsdA/IiYcuyZvxyv4=)
2: ef1IFXBRyUc_UhmQBLKR_kqjP-k.roa (hash: ReaiOea67yb8AgzXCMfyIi9G3e09LCQ9vM+znmfetZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:35:b5:7c:54:7b:cb:38:f8:d1:54:be:ab:79:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=2dfb1effdbf1e4f21a77016a47387790053667e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:0c:7f:54:a1:8e:dd:88:8c:19:80:69:54:
3e:e7:50:9b:92:cb:f1:6e:33:99:60:37:3f:1e:28:
97:9c:bb:81:16:38:d7:fc:3e:db:7c:50:61:2d:df:
8e:77:b8:cd:cc:ab:61:7a:87:0c:c9:af:72:9a:2c:
c8:53:64:af:80:cc:c2:1c:99:c8:20:a5:3d:74:d3:
05:52:05:46:78:3e:8b:d1:a3:8c:87:9a:d9:c3:68:
e9:1b:92:d4:81:73:29:35:01:e7:25:e6:bf:c1:b7:
f3:d5:a6:9d:18:64:c7:d1:9f:9d:d4:b6:3f:a7:23:
0f:78:60:a4:0d:cd:ed:2d:8f:97:3e:3d:a6:02:bb:
8d:9b:07:54:89:14:11:86:e0:63:c8:d0:90:17:07:
a8:e4:95:86:a9:16:20:c8:69:ce:6e:17:57:7a:4d:
93:51:11:b5:45:15:cf:99:81:81:a2:fc:44:b3:72:
46:29:f9:b5:76:16:b3:26:2f:e9:2f:a2:4c:51:05:
66:ea:a8:d6:27:da:b4:35:46:5a:02:db:90:a3:b3:
29:44:b6:f9:00:9d:16:de:8e:98:ca:a1:7f:98:a7:
be:b8:38:cb:7b:bc:2f:44:a9:a0:5a:36:8f:c9:e5:
f2:fe:c9:b3:7d:14:b5:43:ba:25:57:9c:86:f8:d1:
0f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FB:1E:FF:DB:F1:E4:F2:1A:77:01:6A:47:38:77:90:05:36:67:E5
X509v3 Authority Key Identifier:
keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c5:03:26:e5:d3:64:b0:ec:39:cf:37:fb:b9:66:12:bb:0c:
07:b0:0d:d3:1f:70:06:91:f0:36:81:c4:51:cd:ac:4d:8d:75:
77:47:27:98:1f:8a:e3:66:b5:78:08:4c:02:20:18:91:05:48:
fb:5f:2b:0e:8a:02:80:a8:80:98:b5:b2:89:3f:c0:22:8e:69:
4b:4a:6a:45:ac:6a:44:2d:dc:ef:5b:7c:dc:f5:1c:84:b3:52:
2e:bd:69:c8:a7:ff:49:55:6a:50:4b:a7:db:a8:cb:a6:72:0b:
36:e1:a4:21:94:e2:53:d8:0c:2b:b5:2a:0e:92:66:29:03:d4:
6c:9b:e4:ea:c9:9d:2d:14:8b:ba:04:4d:8a:fa:65:fe:79:f6:
8e:22:1a:14:13:04:ed:7e:a2:6f:f7:d9:62:9d:d1:c3:61:a3:
e8:06:f8:ab:c0:3e:38:eb:49:ee:e0:2f:ba:7c:3d:c6:f9:99:
20:3a:d3:db:49:4a:c1:14:a9:ff:b4:16:66:49:09:23:0e:56:
f9:02:6a:b3:30:05:2d:da:59:22:4c:79:35:d1:9c:74:39:9e:
c5:2e:57:fd:0d:30:30:fe:02:dd:0e:91:ab:75:c5:96:b5:f7:
1e:b3:3a:84:58:03:18:b9:d4:f9:db:86:ea:b2:6d:4c:07:ac:
3d:d0:4c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:47 2025 by rpki-client